Apache 1.2.6 released (fwd)

Mustafa Akgul (akgul@Bilkent.EDU.TR)
Wed, 25 Mar 1998 09:12:24 +0200 (EET)


http://apache.bilkent.edu.tr/
ftp://sunsite.bilkent.edu.tr/apache/dist/
adresinden alinabilir

Saygilar
Mustafa Akgul
Forwarded message:
>From apache-announce-owner-akgul=Bilkent.EDU.TR@apache.org Wed Mar 25 02:16:07 1998
Date: Tue, 24 Mar 1998 13:37:56 -0800 (PST)
From: Dean Gaudet <dgaudet@apache.org>
To: apache-announce@apache.org
Subject: Apache 1.2.6 released
Message-ID: <Pine.LNX.3.96dg4.980324133631.29530A-100000@twinlark.arctic.org>
X-Comment: Visit http://www.arctic.org/~dgaudet/legal for information regarding copyright and disclaimer.
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: apache-announce-owner@apache.org
Precedence: bulk

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Apache 1.2.6 Released
- ---------------------

The Apache Group is pleased to announce the release of the 1.2.6 version
of Apache, the latest stable release of the Apache web server.

Apache 1.2.6 is a bug fix release. In particular, various HTTP/1.1 bugs
were corrected, including a few that caused interoperability problems
with clients such as Internet Explorer 4. Some portability issues were
cleared up, but others have been left for the 1.3 series. We strongly
urge folks to upgrade to Apache 1.2.6 so that their servers interoperate
correctly with HTTP/1.1 clients that are appearing.

Apache has been the most popular web server on the Internet since April
of 1996. The February 1998 WWW server site survey by Netcraft (see:
http://www.netcraft.co.uk/Survey/) found that more web servers were
using Apache than any other software. Apache and its derivatives are run
on over 50% of all web domains on the Internet.

The Apache project has been organized in an attempt to answer some of
the concerns regarding active development of a public domain HTTP server
for UNIX. The goal of this project is to provide a secure, efficient and
extensible server which provides HTTP services in sync with the current
HTTP standards.

For more information, please check out http://www.apache.org/

Dean

Changes with Apache 1.2.6

*) Increase the robustness of the child_main loop. When unexpected
select() or accept() errors occur we exit() the child. This deals
with many reported problems where apache would fill the error_log
with messages. [Dean Gaudet] PR#1747, 1107, 588, 1787, 987, 588

*) PORT: Add -lm to LIBS for HPUX. [Dean Gaudet] PR#1639

*) SECURITY: "UserDir /abspath" without a * in the path would allow
remote users to access "/~.." and bypass access restrictions
(but note /~../.. was handled properly).
[Lauri Jesmin <jesmin@ut.ee>] PR#1701

*) mod_rewrite's RewriteLog should behave like mod_log_config, it
shouldn't force hostname lookups. [Dean Gaudet] PR#1684

*) mod_include when using XBitHack Full would send ETags in addition to
sending Last-Modifieds. This is incorrect HTTP/1.1 behaviour.
[Dean Gaudet] PR#1133

*) SECURITY: When a client connects to a particular port/addr, and
gives a Host: header ensure that the virtual host requested can
actually be reached via that port/addr. [Ed Korthof <ed@organic.com>]

*) Support virtual hosts with wildcard port and/or multiple ports
properly. [Ed Korthof <ed@organic.com>]

*) Fixed some case-sensitivity issues according to RFC2068.
[Dean Gaudet]

*) Set r->allowed properly in mod_asis.c, mod_dir.c, mod_info.c,
and mod_include.c. [Dean Gaudet]

*) Variable 'cwd' was being used pointlessly before being set.
[Ken Coar] PR#1738

*) SIGURG doesn't exist on all platforms.
[Mark Andrew Heinrich <heinrich@tinderbox.Stanford.EDU>]

*) When an error occurs during a POST, or other operation with a
request body, the body has to be read from the net before allowing
a keepalive session to continue. [Roy Fielding] PR#1399

*) When an error occurs in fcntl() locking suggest the user look up
the docs for LockFile. [Dean Gaudet]

*) table_set() and table_unset() did not deal correctly with
multiple occurrences of the same key. [Stephen Scheck
<sscheck@infonex.net>, Ben Laurie] PR#1604

*) send_fd_length() did not calculate total_bytes_sent properly in error
cases. [Ben Reser <breser@regnow.com>] PR#1366

*) r->connection->user was allocated in the wrong pool causing corruption
in some cases when used with mod_cern_meta. [Dean Gaudet] PR#1500

*) mod_proxy was sending HTTP/1.1 responses to ftp requests by mistake.
Also removed the auto-generated link to www.apache.org that was the
source of so many misdirected bug reports. [Roy Fielding, Marc Slemko]

*) Multiple "close" tokens may have been set in the "Connection"
header, not an error, but a waste.
683

*) "basic" and "digest" auth tokens should be tested case-insensitive.
[Ronald.Tschalaer@psi.ch] PR#1599, PR#1666

*) It appears the "257th byte" bug (see
htdocs/manual/misc/known_client_problems.html#257th-byte) can happen
at the 256th byte as well. Fixed. [Dean Gaudet]

*) mod_rewrite would not handle %3f properly in some situations.
[Ralf Engelschall]

*) Apache could generate improperly chunked HTTP/1.1 responses when
the bputc() or rputc() functions were used by modules (such as
mod_include). [Dean Gaudet]

*) #ifdef wrap a few #defines in httpd.h to make life easier on
some ports. [Ralf Engelschall]

*) Fix MPE compilation error in mod_usertrack.c. [Mark Bixby]

*) Quote CC='$(CC)' to improve recurse make calls. [Martin Kraemer]

*) Avoid B_ERROR redeclaration on sysvr4 systems. [Martin Kraemer]

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv

iQA/AwUBNRgnu31tv9HwjgEqEQJIyQCeLBV32ZVcID5Nco+yW20dmgb7beIAoIDS
HYVcAI5U2HGONaEzJF6zTK/R
=/7uo
-----END PGP SIGNATURE-----